Privacy Policy

Updated at 2026-07-29

SecScanner ("we," "our," or "us") is a website security scanning and monitoring service. This Privacy Policy explains what information we collect when you use secscanner.app, how we use it, and who we share it with. By using our Service, you agree to the collection and use of information as described here and in our Terms & Conditions.

Information We Collect

We collect only the information needed to run the Service:

• Account data— when you sign in with Google or email magic link, we store your name, email address, and profile image, plus your OAuth account link. This is used to authenticate you and associate your scans with your account.
• Scan data— the URLs you submit for scanning and the resulting security check results (TLS, headers, DNS, and content checks), stored so you can view your scan history and reports.
• Monitoring configuration— if you set up continuous monitoring for a domain, we store the monitored URL, frequency, and notification preferences (email, Slack, webhook).
• Billing data— if you subscribe to a paid plan, our payment processor Polar handles your payment details. We store the resulting subscription status, plan, and payment records, but never your card number.
• Contact submissions— if you contact us through a form on the site, we store your name, email, and message to respond to you.
• Technical data— we temporarily store your IP address to enforce rate limits and prevent abuse of the scanning service.

How We Use Your Information

• To provide, operate, and maintain the scanning and monitoring Service
• To authenticate you and keep your account secure
• To send transactional emails (scan results, monitoring alerts, magic-link sign-in)
• To process payments and manage subscriptions
• To respond to support and contact requests
• To understand product usage and improve the Service, via the analytics tools listed below
• To prevent abuse, fraud, and enforce rate limits

Third-Party Service Providers

We work with the following third parties to operate the Service. We do not sell your personal information, and we only share it with the operational providers listed below — never for their own marketing purposes.

• OpenPanel— self-hosted product analytics, used to understand how visitors and customers use the Service.
• Google Analytics and Plausible— web analytics, used to measure traffic and site usage. Both only run after you consent via our cookie banner. See our Cookie Policy for details.
• Polar— billing and payment processing for paid subscriptions.
• Resend— delivery of transactional email (magic-link sign-in, scan-complete notifications, monitoring alerts).
• Hosting infrastructure— our application, database, and background job processing run on infrastructure provided by our hosting provider.

Each of these providers only receives the information necessary to perform their function and is bound by their own privacy and security practices.

Cookies

We use a small number of strictly necessary cookies for authentication and session management, and optional analytics cookies that are only set after you consent. See our Cookie Policy for the full list and how to manage your preferences.

How Long We Keep Your Information

We keep your account, scan, and monitoring data for as long as your account is active. Scan results and monitoring history are retained so you can review past reports and track changes over time. Rate-limit records are short-lived and expire automatically.

If you delete your account, we delete your account data, scans, monitors, and API keys from our active systems. Records we are required to keep for legal, tax, or billing purposes (such as payment records) are retained only as long as required by law.

How We Protect Your Information

All data is transmitted over encrypted connections (HTTPS/TLS) and stored in our production database, which is not publicly accessible. Access to production systems is limited to authorized personnel. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

You can:

• Access and update your account information from your dashboard at any time
• Request a copy of the personal information we hold about you
• Request deletion of your account and associated data
• Opt out of non-essential analytics cookies via the cookie banner
• Unsubscribe from non-essential emails via the link in each email

To exercise any of these rights, contact us at the email address below. If you are located in the EEA, UK, or California, these rights are provided under GDPR and CCPA respectively; we honor the same rights for all users regardless of location.

Children's Privacy

The Service is not directed to anyone under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

International Data Transfers

Your information may be processed and stored in a country other than your own, wherever our hosting and service providers operate. By using the Service, you consent to this transfer and processing.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. We will post the updated policy on this page with a revised date. Continued use of the Service after a change takes effect means you accept the updated policy.

Contact Us

Questions about this Privacy Policy? Email us at hello@secscanner.app.